Re: apache suexec, non-standard docroot
Fabio Massimo Di Nitto <[EMAIL PROTECTED]> writes: > On Thu, 8 Jul 2004, R.M. Evers wrote: > >> thanks for your speedy reply. so it's possible to only recompile >> suexec? or do you mean i have to recompile apache with proper >> patching? > > suexec is compiled together with apache. It is possible to compile > suexec on its own but it is much more complicate than compiling it > together with apache, because suexec links with 2 libraries that are > created while apache builds. I think that there are many admins out there who would like to be able to build their own suexec more easily than they can right now. This is my idea to acheive this: * Build suexec as a separate binary package (apache-suexec or apache2-suexec). * Possibly build more than one apache-suexec-* package with different configurations that are commonly used by webserver admins * Provide infrastructure to build an apache-suexec-custom package. This is done by the Exim4 maintainers for admins who are not content with the available selection of exim4-daemon-light and exim4-daemon-heavy packages. What do you think? Cheers, -Hilko
Re: apache suexec, non-standard docroot
On Thu, 2004-07-08 at 14:42, Fabio Massimo Di Nitto wrote: > suexec is compiled together with apache. It is possible to compile suexec > on its own but it is much more complicate than compiling it together with > apache, because suexec links with 2 libraries that are created while > apache builds. > > Fabio ok, i'll go ponder.. :-) thank you very much, fabio. regards, -rodi.
Re: apache suexec, non-standard docroot
On Thu, 8 Jul 2004, R.M. Evers wrote: > thanks for your speedy reply. so it's possible to only recompile > suexec? or do you mean i have to recompile apache with proper > patching? suexec is compiled together with apache. It is possible to compile suexec on its own but it is much more complicate than compiling it together with apache, because suexec links with 2 libraries that are created while apache builds. Fabio -- fajita: step one Whatever the problem, step one is always to look in the error log. fajita: step two When in danger or in doubt, step two is to scream and shout.
Re: apache suexec, non-standard docroot
On Thu, 2004-07-08 at 13:56, Fabio Massimo Di Nitto wrote: > On Thu, 8 Jul 2004, R.M. Evers wrote: > > > dear list, > > > > today i wanted to enable apache's suexec mechanism on one of our debian > > woody webservers, so that our customers can use cgi more securely. but > > in my infinite wisdom, i created all user accounts under /home/domains, > > instead of /var/www.. this means that, when suexec is enabled for a > > vhost, running a cgi script will result in an internal server error > > since debian's apache is configured with "--suexec-docroot=/var/www". > > changing my configuration to conform to this standard is way too much > > work. and i really, really don't want to recompile apache.. > > > > so, does anyone know of a way to use suexec with a non-standard docroot > > for vhosts? or is this just simply impossible? > > > > You need to recompile suexec with proper patching. There is no other way > around it other than changing your setup. > > Fabio fabio, thanks for your speedy reply. so it's possible to only recompile suexec? or do you mean i have to recompile apache with proper patching? kind regards, -rodi
Re: apache suexec, non-standard docroot
On Thu, 8 Jul 2004, R.M. Evers wrote: > dear list, > > today i wanted to enable apache's suexec mechanism on one of our debian > woody webservers, so that our customers can use cgi more securely. but > in my infinite wisdom, i created all user accounts under /home/domains, > instead of /var/www.. this means that, when suexec is enabled for a > vhost, running a cgi script will result in an internal server error > since debian's apache is configured with "--suexec-docroot=/var/www". > changing my configuration to conform to this standard is way too much > work. and i really, really don't want to recompile apache.. > > so, does anyone know of a way to use suexec with a non-standard docroot > for vhosts? or is this just simply impossible? > You need to recompile suexec with proper patching. There is no other way around it other than changing your setup. Fabio -- fajita: step one Whatever the problem, step one is always to look in the error log. fajita: step two When in danger or in doubt, step two is to scream and shout.
